Latest Articles
Security insights, tips, and guides to keep your WordPress site protected.
Forminator’s critical file-upload flaw: what 600,000 WordPress sites need to check
Forminator Forms is installed on more than 600,000 WordPress sites. A critical security flaw has just been disclosed, and the...
Read Articlewp-config.php hardening: the 5 constants most owners never set
If you run a WordPress site for your business, there’s a decent chance you’ve never opened wp-config.php. Totally normal. Most...
Read ArticleWordPress 7.0.4 is out – not July’s no-password flaw, but update now
Last month we wrote about the WordPress flaw that let attackers in without a password. That was the 7.0.0 and...
Read ArticleWhy your hosting’s “malware detected” email often arrives too late
You get an email from your host. Subject line: malware detected. Your stomach drops a bit. Fair enough. But here’s...
Read ArticleHow Fake Plugin and Theme Updates Trick Site Owners
You log into WordPress and see a warning. A plugin needs updating. Or maybe a theme. There’s a bright button....
Read ArticleWhat to Do the Moment You Suspect Your Site Is Compromised
You don’t need a giant red warning screen to have a hacked website. Sometimes it’s weirder than that. Your homepage...
Read ArticleREST API User Enumeration: How Bots Find Your Admin Usernames
You lock your front door. Good. But then you hang a little sign next to it saying, “Hi, the keyholder...
Read ArticleThe hidden costs of a DIY WordPress website
Building your own WordPress site can feel like a smart little win at first. You save money. You pick a...
Read ArticleThe WordPress flaw that let hackers in without a password – what happened
Last week was a long one. If you run a WordPress site and you felt a little jolt of panic...
Read ArticleWhy your site gets reinfected after a “successful” cleanup
You paid to clean the hacked site. Or maybe your developer “fixed it” in an afternoon. The weird redirect disappeared,...
Read ArticleWordPress security on a budget: what’s actually worth paying for
If you run a small business website, you’ve probably seen the same advice over and over. Buy this premium plugin....
Read ArticleA Backup Is Not a Recovery Plan – Here’s the Difference
A lot of small business owners feel pretty safe once backups are switched on. Fair enough. You see “daily backup...
Read Article